Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package libzypp-plugin-appdata for
openSUSE:Factory checked in at 2022-08-17 18:16:41
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/libzypp-plugin-appdata (Old)
and /work/SRC/openSUSE:Factory/.libzypp-plugin-appdata.new.1521 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libzypp-plugin-appdata"
Wed Aug 17 18:16:41 2022 rev:24 rq:997388 version:1.0.1+git.20220816
Changes:
--------
---
/work/SRC/openSUSE:Factory/libzypp-plugin-appdata/libzypp-plugin-appdata.changes
2021-10-12 21:50:05.471935099 +0200
+++
/work/SRC/openSUSE:Factory/.libzypp-plugin-appdata.new.1521/libzypp-plugin-appdata.changes
2022-08-17 18:20:04.422795714 +0200
@@ -1,0 +2,11 @@
+Tue Aug 16 12:19:30 UTC 2022 - dims...@opensuse.org
+
+- Update to version 1.0.1+git.20220816:
+ * Drop call to appstreamcli refresh
+ * Added hardening to systemd service (bsc#1181400)
+ * Typo fix for command help
+- Drop harden_appstream-sync-cache.service.patch: fixed upstream.
+- Drop Appstream recommends: no longer needed, as we no longer call
+ appstreamcli.
+
+-------------------------------------------------------------------
Old:
----
harden_appstream-sync-cache.service.patch
openSUSE-appstream-1.0.1+git.20180426.tar.xz
New:
----
openSUSE-appstream-1.0.1+git.20220816.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ libzypp-plugin-appdata.spec ++++++
--- /var/tmp/diff_new_pack.nCNKFY/_old 2022-08-17 18:20:04.958796826 +0200
+++ /var/tmp/diff_new_pack.nCNKFY/_new 2022-08-17 18:20:04.962796834 +0200
@@ -1,7 +1,7 @@
#
# spec file for package libzypp-plugin-appdata
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2022 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,17 +17,14 @@
Name: libzypp-plugin-appdata
-Version: 1.0.1+git.20180426
+Version: 1.0.1+git.20220816
Release: 0
Summary: libzypp extension to handle AppStream metadata
-License: MIT AND CC0-1.0
+License: CC0-1.0 AND MIT
Group: System/Libraries
URL: https://wiki.gnome.org/Design/Apps/Software
Source0: openSUSE-appstream-%{version}.tar.xz
Source99: libzypp-plugin-appdata-rpmlintrc
-Patch0: harden_appstream-sync-cache.service.patch
-# appstreamcli is provided by the AppStream package. Let's pull it in when
available, but ignore its absence
-Recommends: AppStream
# appstream-glib >= 0.3.6 is the first to correctly to appstream-util
uninstall in /var/cache
Requires: appstream-glib >= 0.3.6
# appdata hook was introduced in libzypp 14.29.4
@@ -59,8 +56,7 @@
This package contains extra appstream metadata to be used by appstream-builder
%prep
-%setup -q -n openSUSE-appstream-%{version}
-%patch0 -p1
+%autosetup -n openSUSE-appstream-%{version}
%build
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.nCNKFY/_old 2022-08-17 18:20:05.018796950 +0200
+++ /var/tmp/diff_new_pack.nCNKFY/_new 2022-08-17 18:20:05.022796958 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://github.com/DimStar77/openSUSE-appstream.git</param>
- <param
name="changesrevision">8708ff5b3330e28eefb228a78d719871ff5bd6da</param></service></servicedata>
+ <param
name="changesrevision">39008e0c9df9f404666d7979e4b166840be6c436</param></service></servicedata>
(No newline at EOF)
++++++ openSUSE-appstream-1.0.1+git.20180426.tar.xz ->
openSUSE-appstream-1.0.1+git.20220816.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/openSUSE-appstream-1.0.1+git.20180426/.gitignore
new/openSUSE-appstream-1.0.1+git.20220816/.gitignore
--- old/openSUSE-appstream-1.0.1+git.20180426/.gitignore 1970-01-01
01:00:00.000000000 +0100
+++ new/openSUSE-appstream-1.0.1+git.20220816/.gitignore 2022-08-16
14:17:09.000000000 +0200
@@ -0,0 +1,2 @@
+*.pyc
+fedora-*
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/openSUSE-appstream-1.0.1+git.20180426/InstallAppdata.py
new/openSUSE-appstream-1.0.1+git.20220816/InstallAppdata.py
--- old/openSUSE-appstream-1.0.1+git.20180426/InstallAppdata.py 2018-04-26
11:36:41.000000000 +0200
+++ new/openSUSE-appstream-1.0.1+git.20220816/InstallAppdata.py 2022-08-16
14:17:09.000000000 +0200
@@ -47,7 +47,3 @@
# Fixup icon that might have uncompressed with odd permissions
for icondir in glob.glob('/var/cache/app-info/icons/*'):
os.chmod(icondir, 0o755)
-
-# (Re)create the Xapian database required by the KDE tools
-os.system("/usr/bin/appstreamcli refresh-cache")
-
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/openSUSE-appstream-1.0.1+git.20180426/appstream-sync-cache.service
new/openSUSE-appstream-1.0.1+git.20220816/appstream-sync-cache.service
--- old/openSUSE-appstream-1.0.1+git.20180426/appstream-sync-cache.service
2018-04-26 11:36:41.000000000 +0200
+++ new/openSUSE-appstream-1.0.1+git.20220816/appstream-sync-cache.service
2022-08-16 14:17:09.000000000 +0200
@@ -4,6 +4,19 @@
ConditionDirectoryNotEmpty=!/var/cache/app-info/xmls
[Service]
+# added automatically, for details please see
+# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
+ProtectSystem=full
+ProtectHome=true
+PrivateDevices=true
+ProtectHostname=true
+ProtectClock=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectKernelLogs=true
+ProtectControlGroups=true
+RestrictRealtime=true
+# end of automatic additions
Type=forking
ExecStart=/usr/bin/zypper appstream-cache
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/openSUSE-appstream-1.0.1+git.20180426/zypper-appstream-cache
new/openSUSE-appstream-1.0.1+git.20220816/zypper-appstream-cache
--- old/openSUSE-appstream-1.0.1+git.20180426/zypper-appstream-cache
2018-04-26 11:36:41.000000000 +0200
+++ new/openSUSE-appstream-1.0.1+git.20220816/zypper-appstream-cache
2022-08-16 14:17:09.000000000 +0200
@@ -1,4 +1,4 @@
#!/bin/bash
-echo "Forcing resync of AppStream medata from repo cache into
/var/cache/app-info"
+echo "Forcing resync of AppStream metadata from repo cache into
/var/cache/app-info"
ZYPP_PLUGIN_APPDATA_FORCE_COLLECT=1 zypper -n lr >/dev/null 2>&1
